This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa File: a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa (raw, json) Hash identifier: nbuCIeZVZs9sZGh2LJ8n+g4kkOyw1EwFH0HRbpFvGK4= Subject key identifier: 7F:12:FE:AA:2D:26:52:3A:F8:9B:08:62:2A:8F:F1:98:FC:AD:72:8D Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 29C074AD81D765AD315E2FF52DDB4D4C2E03FF78 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa Signing time: Tue 20 Jan 2026 17:08:19 +0000 ROA not before: Tue 20 Jan 2026 17:08:19 +0000 ROA not after: Mon 20 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 57.80.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c0:74:ad:81:d7:65:ad:31:5e:2f:f5:2d:db:4d:4c:2e:03:ff:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Jan 20 17:08:19 2026 GMT Not After : Apr 20 23:59:59 2026 GMT Subject: serialNumber=d8af924f54898b200faa0599c19d9a6e8851b173dad648605c6e0f4b92f71dca, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:41:4e:1b:19:b9:9b:28:2c:c1:b8:22:a9: 44:83:aa:37:27:d1:36:a4:7a:7e:b3:cc:38:59:da: 44:a3:45:36:74:af:28:f2:3f:f6:55:5b:83:74:ee: 85:fa:cc:5d:e8:06:47:6a:8e:fa:f9:f8:cf:a9:47: 8c:40:49:6b:c1:db:38:32:06:65:a8:9f:cb:3d:97: 3c:e0:30:d9:1c:f2:b8:84:45:07:d1:26:b7:70:0d: 66:c5:60:a1:63:92:b1:a2:e6:e3:33:01:fb:cd:e9: b6:c7:8d:3e:41:31:bf:e6:2d:9d:dc:c4:41:60:b8: 6e:64:79:7e:d5:5c:5f:89:f4:ee:19:2b:81:47:00: fa:cb:e8:ca:88:7c:39:9d:e1:96:3a:84:7f:1b:37: 66:0e:b3:65:97:83:44:25:7a:e6:5b:4a:2e:6c:ee: 14:4d:d9:32:31:6d:50:d9:a5:61:09:14:ff:66:74: eb:a6:d0:29:7a:bd:6a:b1:75:06:f2:f3:68:e6:0c: f5:17:4b:1e:3e:83:97:23:25:75:b9:28:8f:5c:30: 4d:2c:9c:d2:f2:0a:e0:62:39:f4:df:0b:23:38:ac: 70:0e:0b:e6:69:fe:43:1b:9d:9e:d6:43:f9:f5:ee: bb:91:b2:95:ba:9a:ea:4e:ce:67:c2:d9:67:ed:e2: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:12:FE:AA:2D:26:52:3A:F8:9B:08:62:2A:8F:F1:98:FC:AD:72:8D X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:92:ba:e1:c5:f5:bc:74:52:c3:af:55:42:ff:14:72:9f:02: 82:45:1c:72:c8:dc:fb:50:2f:de:d5:3a:c9:f6:05:e4:74:03: d4:77:29:ec:17:da:ef:fb:f6:b3:28:7f:ac:bf:04:1c:e1:30: 81:91:74:25:ef:df:6d:f1:25:5a:86:cb:d6:e3:15:7b:59:9e: 77:7a:1b:e4:4c:2d:2a:d9:3a:4d:1e:44:11:ae:26:be:1a:50: 06:aa:74:ec:b8:4f:6e:ab:41:8a:64:c9:f6:c6:56:6b:17:e8: 0f:63:bd:06:7f:b6:28:45:b8:19:9a:7d:01:63:35:76:b5:a0: 95:ac:c8:50:45:be:5b:1b:e1:35:53:bd:1c:87:5d:4d:bf:4b: 5c:9a:05:69:eb:b4:aa:4c:dd:b3:8f:3c:b5:6d:a0:b2:15:ab: 14:26:40:c0:93:c4:6d:1b:f7:9c:3d:76:11:6e:5a:79:05:9c: a0:aa:60:ab:23:43:66:02:ea:eb:fa:b8:57:24:e9:28:b2:e7: f7:2e:51:cb:65:6a:01:22:13:cc:42:dc:1d:a7:af:0f:1e:61: e3:d1:84:c5:db:e7:b4:c9:1d:7b:a4:30:a7:f1:c1:0e:e3:4d: c3:49:e5:da:19:84:18:b6:0e:d3:37:23:a7:77:5b:18:55:80: 2b:74:dd:65 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUKcB0rYHXZa0xXi/1LdtNTC4D/3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNjAxMjAxNzA4MTlaFw0yNjA0MjAyMzU5NTlaMHoxSTBHBgNV BAUTQGQ4YWY5MjRmNTQ4OThiMjAwZmFhMDU5OWMxOWQ5YTZlODg1MWIxNzNkYWQ2 NDg2MDVjNmUwZjRiOTJmNzFkY2ExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALR8QU4bGbmbKCzBuCKpRIOqNyfRNqR6frPMOFnaRKNFNnSvKPI/9lVbg3Tu hfrMXegGR2qO+vn4z6lHjEBJa8HbODIGZaifyz2XPOAw2RzyuIRFB9Emt3ANZsVg oWOSsaLm4zMB+83ptseNPkExv+YtndzEQWC4bmR5ftVcX4n07hkrgUcA+svoyoh8 OZ3hljqEfxs3Zg6zZZeDRCV65ltKLmzuFE3ZMjFtUNmlYQkU/2Z066bQKXq9arF1 BvLzaOYM9RdLHj6DlyMldbkoj1wwTSyc0vIK4GI59N8LIziscA4L5mn+QxudntZD +fXuu5Gylbqa6k7OZ8LZZ+3i1SsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR/Ev6q LSZSOvibCGIqj/GY/K1yjTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv YTMxMjk3MmQtZWUwMC00Y2QxLWFjZjctODQ5ZjdjMjZlZDdiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlQMA0G CSqGSIb3DQEBCwUAA4IBAQBskrrhxfW8dFLDr1VC/xRynwKCRRxyyNz7UC/e1TrJ 9gXkdAPUdynsF9rv+/azKH+svwQc4TCBkXQl799t8SVahsvW4xV7WZ53ehvkTC0q 2TpNHkQRria+GlAGqnTsuE9uq0GKZMn2xlZrF+gPY70Gf7YoRbgZmn0BYzV2taCV rMhQRb5bG+E1U70ch11Nv0tcmgVp67SqTN2zjzy1baCyFasUJkDAk8RtG/ecPXYR blp5BZygqmCrI0NmAurr+rhXJOkosuf3LlHLZWoBIhPMQtwdp68PHmHj0YTF2+e0 yR17pDCn8cEO403DSeXaGYQYtg7TNyOnd1sYVYArdN1l -----END CERTIFICATE-----Generated at Thu Jan 22 22:15:44 2026 by rpki-client